Skip to content

dlt_daemon

Suresoft-GLaDOS edited this page May 26, 2023 · 8 revisions

#1

Link : https://github.com/COVESA/dlt-daemon/commit/ff4f44c159df6f44b48bd38c9d2f104eb360be11
Description: Fix buffer overflow in dlt_filter_load
CVE Info: CVE-2020-29394

At src/shared/dlt_common.c

@@ -404,7 +404,7 @@ DltReturnValue dlt_filter_load(DltFilter *filter, const char *filename, int verb
     while (!feof(handle)) {
         str1[0] = 0;
+        if (fscanf(handle, "%254s", str1) != 1)
-        if (fscanf(handle, "%s", str1) != 1)
             break;
         if (str1[0] == 0)

Tags
#Invalid-format-string #Memory-error #Single-line #Modified #CVE

Clone this wiki locally